Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-08-05T08:25:01.770374-04:00 narcissus.teiken.net sshd-session[218537]: pam_unix(sshd:auth): aut ...
show more2026-08-05T08:25:01.770374-04:00 narcissus.teiken.net sshd-session[218537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.46.148
2026-08-05T08:25:03.392621-04:00 narcissus.teiken.net sshd-session[218537]: Failed password for invalid user sdadmin from 138.68.46.148 port 44878 ssh2
2026-08-05T08:27:56.749495-04:00 narcissus.teiken.net sshd-session[218699]: Invalid user ps from 138.68.46.148 port 58548
2026-08-05T08:27:56.821443-04:00 narcissus.teiken.net sshd-session[218699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.46.148
2026-08-05T08:27:58.682410-04:00 narcissus.teiken.net sshd-session[218699]: Failed password for invalid user ps from 138.68.46.148 port 58548 ssh2
2026-08-05T08:30:48.082983-04:00 narcissus.teiken.net sshd-session[219085]: Invalid user gns3 from 138.68.46.148 port 49596
...
show less
2026-08-05T05:26:52.771676-07:00 bluejay sshd[111957]: Invalid user sdadmin from 138.68.46.148 port ...
show more2026-08-05T05:26:52.771676-07:00 bluejay sshd[111957]: Invalid user sdadmin from 138.68.46.148 port 33204
2026-08-05T05:26:52.794844-07:00 bluejay sshd[111957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.46.148
2026-08-05T05:26:54.877449-07:00 bluejay sshd[111957]: Failed password for invalid user sdadmin from 138.68.46.148 port 33204 ssh2
2026-08-05T05:29:48.554916-07:00 bluejay sshd[112494]: Invalid user ps from 138.68.46.148 port 45960
...
show less
2026-08-05T14:26:03.874434+02:00 root260 sshd-session[557392]: pam_unix(sshd:auth): authentication f ...
show more2026-08-05T14:26:03.874434+02:00 root260 sshd-session[557392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.46.148
2026-08-05T14:26:05.673366+02:00 root260 sshd-session[557392]: Failed password for invalid user sdadmin from 138.68.46.148 port 34720 ssh2
2026-08-05T14:29:00.034505+02:00 root260 sshd-session[612946]: Invalid user ps from 138.68.46.148 port 50938
2026-08-05T14:29:00.190539+02:00 root260 sshd-session[612946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.46.148
2026-08-05T14:29:01.738410+02:00 root260 sshd-session[612946]: Failed password for invalid user ps from 138.68.46.148 port 50938 ssh2
...
show less
(sshd) Failed SSH login from 138.68.46.148 (US/United States/-): 5 in the last 3600 secs; Ports: *; ...
show more(sshd) Failed SSH login from 138.68.46.148 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 5 14:23:10 sshd[1299285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.46.148 user=[USERNAME]
Aug 5 14:23:11 sshd[1299285]: Failed password for [USERNAME] from 138.68.46.148 port 45678 ssh2
Aug 5 14:25:58 sshd[1305110]: Invalid user [USERNAME] from 138.68.46.148 port 50976
Aug 5 14:26:00 sshd[1305110]: Failed password for invalid user [USERNAME] from 138.68.46.148 port 50976 ssh2
Aug 5 14:28:54 sshd[1313576]: Invalid user [USERNAME] fro
show less
2026-08-05T12:25:36.434388+00:00 traccar-server sshd[718116]: pam_unix(sshd:auth): authentication fa ...
show more2026-08-05T12:25:36.434388+00:00 traccar-server sshd[718116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.46.148
2026-08-05T12:25:38.416253+00:00 traccar-server sshd[718116]: Failed password for invalid user sdadmin from 138.68.46.148 port 47810 ssh2
2026-08-05T12:28:32.477922+00:00 traccar-server sshd[718172]: Invalid user ps from 138.68.46.148 port 45000
2026-08-05T12:28:32.629646+00:00 traccar-server sshd[718172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.46.148
2026-08-05T12:28:34.772217+00:00 traccar-server sshd[718172]: Failed password for invalid user ps from 138.68.46.148 port 45000 ssh2
...
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
SSH
Anonymous
2026-08-05T14:25:09.690637+02:00 diazserver sshd[555261]: Failed password for invalid user sdadmin f ...
show more2026-08-05T14:25:09.690637+02:00 diazserver sshd[555261]: Failed password for invalid user sdadmin from 138.68.46.148 port 47054 ssh2
2026-08-05T14:28:03.065650+02:00 diazserver sshd[555278]: Invalid user ps from 138.68.46.148 port 50630
2026-08-05T14:28:03.257723+02:00 diazserver sshd[555278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.46.148
2026-08-05T14:28:05.420607+02:00 diazserver sshd[555278]: Failed password for invalid user ps from 138.68.46.148 port 50630 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-08-05T14:22:21.182060+02:00 devicedock sshd-session[6567]: User root from 138.68.46.148 not all ...
show more2026-08-05T14:22:21.182060+02:00 devicedock sshd-session[6567]: User root from 138.68.46.148 not allowed because not listed in AllowUsers
2026-08-05T14:25:03.612198+02:00 devicedock sshd-session[6594]: Invalid user sdadmin from 138.68.46.148 port 60420
2026-08-05T14:27:58.940078+02:00 devicedock sshd-session[6615]: Invalid user ps from 138.68.46.148 port 33566
...
show less
2026-08-05T12:24:22.067302+00:00 nyx sshd[95449]: Failed password for invalid user root from 138.68. ...
show more2026-08-05T12:24:22.067302+00:00 nyx sshd[95449]: Failed password for invalid user root from 138.68.46.148 port 53644 ssh2
2026-08-05T12:27:13.178948+00:00 nyx sshd[95888]: Connection from 138.68.46.148 port 58672 on 148.251.110.74 port 22 rdomain ""
2026-08-05T12:27:13.835738+00:00 nyx sshd[95888]: Invalid user sdadmin from 138.68.46.148 port 58672
...
show less
Brute-Force
SSH
Showing 1 to
15
of 39 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ